use 1 endpoint for oauth + openid